211.54.164.48 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: South Korea

Internet Service Provider: KT Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Honeypot attack, port: 5555, PTR: PTR record not found	2020-01-23 08:34:17

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 211.54.164.48
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10288
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;211.54.164.48.			IN	A

;; AUTHORITY SECTION:
.			420	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012202 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 23 08:34:14 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 48.164.54.211.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 48.164.54.211.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
64.227.111.215	attack	Brute force attempt	2020-07-12 00:11:42
24.154.21.24	attackspambots	TCP (SYN) 24.154.21.24:43344 -> port 22, len 60	2020-07-12 00:35:19
62.171.151.248	attackspam	Invalid user miagroup from 62.171.151.248 port 56282	2020-07-12 00:32:17
209.97.187.236	attackspam	Invalid user mili from 209.97.187.236 port 40162	2020-07-12 00:39:01
192.99.34.142	attackspambots	192.99.34.142 - - [11/Jul/2020:17:14:03 +0100] "POST /wp-login.php HTTP/1.1" 200 6688 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.34.142 - - [11/Jul/2020:17:16:25 +0100] "POST /wp-login.php HTTP/1.1" 200 6695 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" 192.99.34.142 - - [11/Jul/2020:17:18:18 +0100] "POST /wp-login.php HTTP/1.1" 200 6688 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2490.80 Safari/537.36" ...	2020-07-12 00:18:43
76.233.226.105	attackspambots	2020-07-11T16:13:49.638990abusebot-4.cloudsearch.cf sshd[9105]: Invalid user harmonie from 76.233.226.105 port 46320 2020-07-11T16:13:49.646802abusebot-4.cloudsearch.cf sshd[9105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=adsl-76-233-226-105.dsl.mrdnct.sbcglobal.net 2020-07-11T16:13:49.638990abusebot-4.cloudsearch.cf sshd[9105]: Invalid user harmonie from 76.233.226.105 port 46320 2020-07-11T16:13:51.376733abusebot-4.cloudsearch.cf sshd[9105]: Failed password for invalid user harmonie from 76.233.226.105 port 46320 ssh2 2020-07-11T16:18:53.325914abusebot-4.cloudsearch.cf sshd[9151]: Invalid user sbh from 76.233.226.105 port 59490 2020-07-11T16:18:53.334945abusebot-4.cloudsearch.cf sshd[9151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=adsl-76-233-226-105.dsl.mrdnct.sbcglobal.net 2020-07-11T16:18:53.325914abusebot-4.cloudsearch.cf sshd[9151]: Invalid user sbh from 76.233.226.105 port 59490 2020-0 ...	2020-07-12 00:31:06
165.227.198.144	attackbots	Jul 11 12:33:08 ny01 sshd[27609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.198.144 Jul 11 12:33:09 ny01 sshd[27609]: Failed password for invalid user jeff from 165.227.198.144 port 50392 ssh2 Jul 11 12:36:20 ny01 sshd[28028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.198.144	2020-07-12 00:44:24
62.12.114.172	attackbotsspam	Invalid user ubuntu from 62.12.114.172 port 54282	2020-07-12 00:11:57
79.137.34.248	attack	Invalid user lisette from 79.137.34.248 port 40448	2020-07-12 00:10:16
14.23.81.42	attackbots	Invalid user johny from 14.23.81.42 port 44100	2020-07-12 00:35:37
203.186.4.118	attackspambots	Invalid user admin from 203.186.4.118 port 41499	2020-07-12 00:16:54
122.51.179.14	attackspambots	Invalid user aiden from 122.51.179.14 port 47226	2020-07-12 00:48:18
120.53.9.99	attack	Invalid user nim from 120.53.9.99 port 48310	2020-07-12 00:48:37
156.96.118.48	attack	Invalid user admin from 156.96.118.48 port 60340	2020-07-12 00:46:07
222.112.206.120	attackbotsspam	$f2bV_matches	2020-07-12 00:37:37

Recently Reported IPs

173.212.198.154	85.28.144.224	201.46.24.244	109.208.4.48
175.177.66.82	158.35.95.47	89.66.250.23	223.209.8.181
71.200.190.114	13.64.77.47	213.24.130.186	40.116.39.250
5.18.157.15	77.39.132.2	141.156.150.251	1.2.226.88
64.220.214.185	181.236.236.176	75.214.155.16	178.134.141.82